This chapter discusses using the SpinAV™ component to protect data on your system from viruses.
Virus scanning is available on the SpinServer with the SpinAV component, which uses McAfee virus-scanning technology. SpinAV requires a separate license; contact your Network Appliance representative for details.
Virus scanning is enabled on individual VFSs, not on individual SpinServers. For individual virtual servers, you can specify whether virus scanning is enabled for new VFSs on that virtual server.
The SpinAV scanning engine and virus database must be downloaded from the Network Appliance NOW site. A valid user ID and password are required to access the antivirus files on the NOW site. These are provided to you with the SpinAV license.
This section discusses the setup and maintenance of the SpinAV antivirus component.
To set up virus scanning on virtual servers and VFSs, use the -virusscanrw and -virusscanro parameters on the vservers servers new, vservers servers modify, filestorage vfs new, and filestorage vfs modify commands. These parameters take values of true and false to enable and disable virus scanning on read-write and read-only VFSs, respectively. Setting these parameters on a virtual server sets the virus-scanning defaults for VFSs on that virtual server. Default settings can be overridden by specifying the parameters for individual VFSs.
See Chapter 12 and Chapter 13 for information on the vservers and filestorage vfs commands.
You can work with the SpinAV configuration for a cluster by using the services antivirus configuration commands.
The services antivirus configuration modify command enables you to modify the antivirus configuration in a SpinServer cluster. The command has the following syntax:
services antivirus configuration modify -scannerenabled {true | false} -repairfiles {true | false} -updatefileurl FTP_URL -autoupdateenabled {true | false} -schedule {#-Minutely | hourly | daily | weekly | monthly | yearly}
The following example enables virus scanning and automatic repair of infected files. It also enables automatic updates from an FTP site named ftp://ftp.spinnakernet.com/pub/antivirus/2.5/update.cfg. Updates occur weekly.
spinserver::> services antivirus configuration modify -scannerenabled true -repairfiles true -updatefileurl ftp://ftp.spinnakernet.com/pub/antivirus/2.5/update.cfg -autoupdateenabled true -schedule weekly
Use the services antivirus configuration testurl command to test a download of the antivirus configuration file from the URL specified by the -updatefileurl parameter of the services antivirus configuration modify command. The test is run as a background job. The command returns a job ID; use the jobs show command to monitor the progress and outcome of the test.
The command has the following syntax:
spinserver::> services antivirus configuration testurl
The services antivirus configuration show command displays the following information about the antivirus configuration on a SpinServer cluster:
Latest scanner level
Whether antivirus scanning is enabled
Whether infected files are automatically repaired
FTP URL for updates
Whether automatic updates are enabled
The schedule for automatic updates
Each SpinServer has its own copy of an antivirus engine and virus-definition database. In SpinAV terminology, a scanner is the combination of an antivirus engine and a virus-definition database. Use the services antivirus servers commands to work with the SpinAV configuration on individual SpinServers, and the services antivirus scanners commands to work with scanners.
The services antivirus servers show command displays information about the antivirus server on one or more SpinServers. The command has the following syntax:
services antivirus servers show [-ssid spinserver]
The command displays the following information:
SpinServer ID
Scanner status (enabled or disabled)
Current scanner level
Number of downloaded scanners (a scanner is considered to be an antivirus engine and a virus database file)
Automatic update status
When the -ssid parameter is specified to display information about the antivirus scanner on a particular SpinServer, the command displays the following additional information:
The time the current scanner was set
Whether an update is currently in progress
The time of the next automatic update
The time of the last automatic update
The last message from the automatic update process
The number of antivirus scans completed
The number of jobs in the high-priority queue
The number of jobs in the low-priority queue
The number of idle threads
The services antivirus servers setcurrent command sets the scanner for a specified SpinServer. The command has the following syntax:
services antivirus servers setcurrent -ssid spinserver -scanner scanner
The following example sets scanner 1 as the current scanner on a SpinServer named Server1:
spinserver::> services antivirus servers setcurrent -ssid Server1 -scanner 1
The services antivirus servers getlatestupdate command downloads the latest antivirus update to a specified SpinServer and sets the updated files as the current scanner level. This command must be run on each SpinServer that requires updated antivirus files. The command has the following syntax:
services antivirus servers getlatestupdate -ssid spinserver
The following example retrieves the latest update to a SpinServer named Server1 and sets the updated files as the current scanner level:
spinserver::> services antivirus servers getlatestupdate -ssid Server1
The services antivirus servers getupdate command retrieves a specific antivirus update in the form of an antivirus engine and a virus database file to a specified SpinServer, and sets the updated files as the current scanner level. The command has the following syntax:
services antivirus servers getupdate -ssid spinserver -engineurl URL_for_engine -databaseurl URL_for_database
The following example retrieves an antivirus engine named eng-1007.tgz and a virus database named dat-1007.tgz from the FTP site ftp://ftp.spinnakernet.com/pub/antivirus/2.5 to a SpinServer named Server1, then sets the new files as the current scanner level:
spinserver::> services antivirus servers getupdate -ssid Server1 -engineurl ftp://ftp.spinnakernet.com/pub/antivirus/2.5/eng-1007.tgz -databaseurl ftp://ftp.spinnakernet.com/pub/antivirus/2.5/dat-1007.tgz
The services antivirus servers deletescannerfiles deletes antivirus scanner files from a specified SpinServer. The command has the following syntax:
services antivirus servers deletescannerfiles -ssid spinserver -scanner scanner
The following example deletes the files for scanner 7 from the SpinServer named Server1:
spinserver::> services antivirus servers deletescannerfiles -ssid Server1 -scanner 7
The services antivirus scanners show command displays information about antivirus scanners. The command has the following syntax:
services antivirus scanners show [-scannerlevel scanner_level]
The command displays the following information:
Scanner level
Engine version
Database version
The services antivirus scanners delete command deletes a scanner level. The command has the following syntax:
services antivirus scanners delete -scannerlevel scanner_level
The following example deletes scanner level 3:
spinserver::> services antivirus scanners delete -scannerlevel 3
Copyright © 2004 Network Appliance, Inc.; copyright © 2003, 2004 Spinnaker Networks, LLC. All rights reserved. Specifications subject to change without notice.